|
|
|
Overview |
Summary: |
A free viewer from BDE that plays rich media (audio and animation) and advertisements created with BDE's b3d Studio animation toolset. The b3d Projector is available as a plug-in for Internet Explorer. Similar to Onflow. Brings targeted ads to your computer, after you provide initial consent for this task. May track your browsing habits and report this info to a central ad server. Most commonly co-installed on computers through software programs such as music sharing or file sharing programs. Brilliant Digital is difficult to remove from a computer once installed because the components are actively running on the computer.
|
Vendor Notes: |
From the doc: '* A full-featured peer-to-peer file sharing application that allows users to search for all types of digital media. * A direct distribution tool that allows content developers unfettered access to consumers and customers. * A powerful search engine where you can search on metadata such as media type, category, performer, product name and more. Search results are grouped together so the same file will only be displayed once. * Embedded Microsoft media player functionality for audio and video playback. * Instant messaging within the network. * Playlist creation and media management tools to easily organize your media file collection.' |
Alias: |
lliantDigital [Ad-aware], Adware-BDE [McAfee], Brilliant Digital (company name), B3D Projector (application name), BDE |
See Also: |
Morpheus |
Category: |
Spyware: Any product that employs a user's Internet connection in the background without their knowledge or explicit permission, and gathers/transmits info on the user, their machine, or their behavior. |
Similar Pests: |
Spyware |
Origins |
Author: |
Brilliant Digital |
By This Author: |
Xrenoder |
URL: |
http://www.brilliantdigital.com/ |
Distribution |
Distribution: |
The b3d Projector was first released in 1997 and was
distributed to users as they downloaded the Kazaa Media
Desktop from Q3 2001. In late 2002 the b3d Projector
became an opt-in component of Kazaa. As of February,
2003 the b3d Projector is no longer being distributed
through Kazaa as BDE is focusing its efforts on its
new secure peer to peer network, Altnet. Altnet is a
subsidiary of BDE. Altnet's flagship product is called
TopSearch, a distributed search index, which functions
much like popular sponsored search programs such as
Google and Yahoo Search. This technology enables artists
and content owners to promote and sell their works in
a secure and convenient way to users of the Kazaa Media
Desktop and other applications and web sites. Users
can access Altnet files by clicking on gold icon files
in the Kazaa Media Desktop search results. As of May
2003 these Altnet files are distributed using the FastTrack
application and protocol and can be easily purchased
using Altnet's payment gateway. Downloadable from Brilliant's
own site.
Previously bundled with Altnet SecureInstall. Pursuant
to an agreement with Sharman Networks, SecureInstall,
along with the Digital Projector, was downloaded as
part of KaZaA Media Desktop,
which has consistently been averaging in excess of two
million downloads per week since we began bundling our
software in the fall, 2001. The Installer technology
connected to file servers, P2P networks and ad servers,
via "connectors", for the purpose of distributing
files across the network. These "connectors"
consisted of small amounts of JavaScript code plus small,
encrypted install scripts used by the Installer. These
components helped facilitate the delivery of files -
ad banners, music files, documents, software files,
etc. - across the network. Apart from facilitating Altnet
SecureInstall connectivity, the Installer was a full-fledged
software installation system, with key features including
file compression, file patching and file encryption.
The file compression reduced download sizes, the file
patching allowed software updates to be made available
as 'patches' rather than full downloads, and file encryption
provided protection from tampering for files on the
network, even if they were on the hard drives of thousands
of user's PCs connected to a P2P network. |
Prevalence: |
Fewer than 5 per 100,000 pest reports More Info |
Clot Factor: |
(insufficient data) [The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.] |
Growth: |
Insufficient data to report growth |
Operation |
Advertising: |
Minor. It allows sites to use 'rich' advertising with 3D effects, sound, and so on. However, it does not add its own advertising to other sites. |
Storage Required: |
at least 9361KB |
Risks |
Privacy Issues: |
None known. The b3d Projector does not track URLs visited
or any other user behavior. BDE collects aggregated
statistics that show a variety of anonymous activities,
including:
1. When a Brilliant Banner ad appears, JavaScript code
posts an "impression stat" to BDE's web server,
indicating that an ad was shown.
2. This stat is added to an accumulated total for that
day. The stat is stored only in aggregated form. No
other information about the user is posted, logged or
kept.
3. If the user clicks on the ad then BDE's JavaScript
posts a "clicked" stat to their web server.
Again, this stat is added to an accumulated total for
that day, and the stat is stored only in aggregated
form. No other information about the user is posted,
logged or kept.
4. Stores a cookie on the user's machine so BDE cam
determine if the user is seeing the ad for the first
time or has seen it before. All that's ever sent back
to the BDE server is "this stat is from someone
who has never seen this ad before" vs. "this
stat is from someone who has seen this ad before."
5. BDE's web server does not collect log files on images,
HTML pages or anything else. That's actually fairly
unusual - most web servers generate log files which
store the user's IP address, making it possible to reconstruct
the user's navigation by analyzing the files that they
loaded. BDE turns off server logging so that they don't
collect even this information. |
Security Issues: |
In its original distribution, Yes. The original Projector
downloaded new components and updates silently. BDE
stated in a CNet
article that they intended to use this capability
to execute software unrelated to the Projector across
all machines where BDE is installed, thus creating a
hidden distributed computing system controlled by themselves.
This plan is now abandoned. No current security issues
known. |
Stability Issues: |
Some reports of crashes and slowdown while using the software. This is not wholly surprising: the Projector has 3D functions, which are always liable to cause problems with some graphics cards and driver versions. |
Detection and Removal |
Automatic Removal: |
PestPatrol detects this. PestPatrol removes this.
|
Manual Removal: |
Since the software is resistant to removal while the
program is actively running please try the following
steps.
- Open your "Control Panel" then to "Add/Remove
Programs" then initiate the program removal process.
This will not remove the program components but will
allow PestPatrol or any other removal program the
opportunity to remove the Digital Brilliance components
from your computer.
- Once the Digital Brilliance files have been identified,
run PestPatrol. Then reboot your computer, and do
a final scan with PestPatrol.
If you have had Digital Brilliance installed on your
computer for any length of time then you are bound to
have dated program components as the software self updates.
Therefore, you will need to verify that all program
folders have been deleted from your computer.
You will want to delete the directory 'BDE' inside
your Windows directory, and the files 'bdeinstall.exe',
'bdeinsta2.dll', 'bdefdi.dll', 'bdedata2.dll', 'bdedownloader.dll',
'bdeverify.dll', 'bdesecureinstall.exe' and 'bdesecureinstall.cab'
inside your System directory (which is 'WINDOWS\SYSTEM'
under Windows 95/98/Me, and 'WINNT\System32' under Windows
NT/2000/XP).
Next, run regedit and remove the 'b3dUpdate' value
from key 'Software\Microsoft\Windows\CurrentVersion\Run\'
in HKEY_LOCAL_MACHINE. You can also remove 'Software\ZUpdate',
and in HKEY_CLASSES_ROOT the keys: 'b3d', 'b3ds', 's3d_auto_file',
'b3dini_auto_file', 'BDEPLAYER.BDEPlayerCtrl[.1]', 'BDESmartInstaller.BDESmartInstallerCtrl[.1]',
'.b3dini'. |
|
Stop Running Processes:
Kill these running processes with Task Manager:
|
|
Unregister DLLs:
Unregister these DLLs with Regsvr32, then reboot:
|
|
Clean Registry:
Remove these registry items (if present) with RegEdit:
|
|
Remove Files:
Remove these files (if present) with Windows Explorer:
|
|
Remove Directories:
Remove these directories (if present) with Windows Explorer:
|
Research |
File Analyses: |
bdeload.dll
· bdedetect1.dll
· bderastmmx_30001.dll
· bdeengine2.dll
· bdeplayer2.dll
· bdesac10.dll
· bde3d_ref2.dll
· npbdplay2.dll
· bdeinsta25.dll
· bdedownloader.dll
· bdeverify.dll
· bdeimage.dll
· bdeverify.exe
· bdesecureinstall.exe
· bdefdi.dll
· bdedata2.dll
· bdeclean.exe
· bdesac24.dll
· bderastdx6_30002.dll
· msvcirt.dllx
· bdeclean.exe
· about.txt
· my shared folder.lnk
· b3dstats.bde
· installb3d3100.bde
· installb3dcodecs.bde
· installb3dplayer3100.bde
· installb3drasts.bde
· installb3dviewer2.bde
· installnsplugins.bde
· syscheckb3dplayer.bde
· bdeengine2.dll
· bdeplayer2.dll
· bdeinsta2.dll
· bdeclean.exe
· b3dstats.bde
· installb3d3105.bde
· installb3dcodecs.bde
· installb3dplayer3101.bde
· installb3drasts.bde
· installb3dviewer2.bde
· setup.bde
· syscheckb3dplayer.bde
· bb.db
· bdupd.dll
· bdeinsta3.dll
· bdeviewer.exe
· bdeinstallman3.exe
· bdewrapper3.dll
· bdcore.dll
· bdeinstallprogress3.dll
· setup.bde
· b3dstats.bde
· installb3d3200.bde
· installb3dcodecs.bde
· installb3dplayer3200.bde
· installb3drasts.bde
· installb3dviewer2.bde
· syscheckb3dplayer.bde
· bdeclean.exe
· b3d.b3d
· bdefdi.dll
· bb.db
· asm.exe
· asmps.dll
· rsch.mdb
· advdebug.txt
· bdeimage.dll
· logo.b3d
· adaware-log 01-08-2003 16-34-03.txt
· adaware-log 01-08-2003 16-48-48.txt
· config3.ini
· auto-quarantine- 01-08-2003 16-49-40.bckp
· infowin2.txt
· infowin3.txt
· b3d projector.lnk
· infowin1.txt
· infowin1a.txt
· installb3d3101.bde
· installb3dcodecs.bde
· installb3dplayer3100.bde
· installb3drasts.bde
· installb3dviewer2.bde
· installnsplugins.bde
|
More Info: |
http://security.ucdavis.edu/alerts/040402.htmlhttp://www.dotcomscoop.com/article.php?sid=290http://www.pcworld.com/resource/printable/article/0,aid,98344,00.asphttp://www.smu.edu/help/resources/KaZaA.asphttp://support.microsoft.com/default.aspx?scid=KB;en-us;q247501http://www.cs.berkeley.edu/~nweaver/0wn2.htmlhttp://zdnet.com.com/2100-11-875278.htmlhttp://www.internet-tips.net/Legal/evil_brilliant.htmhttp://terroirs.denfrance.free.fr/p/internet/espionnage_espions/brillantdigital_altnet.htmlhttp://www.radsoft.net/news/20020411,00.htmlHere is what you have agreed to: http://legalminds.lp.findlaw.com/list/cyberia-l/msg39484.htmlAllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo! |
Research By: |
PestPatrol's Pest Research Center |
Last Revised: |
October 17, 2003 |
Copyright: |
© 2003 PestPatrol, Inc. All rights reserved. |
|